Personal Health Information

Stevenson Memorial Hospital is subject to the Personal Health Information Protection Act (PHIPA).

The main purpose of PHIPA is to:

  • establish rules for the collection, use and disclosure of an individual’s personal health information in order to protect information and privacy.
  • provide individuals with access to their personal health information, subject to limited and specific exceptions set out in the Act.


What is personal health information?

Personal health information may include details such as:

  • Date of birth
  • A person’s physical or mental health condition
  • Level of care, treatment and exams a person received
  • Health card number


Safeguarding your privacy

At Stevenson, we take steps to protect your personal health information from theft, loss and unauthorized access, copying, modification, use, disclosure and disposal.

We conduct audits and investigations to monitor and manage our compliance to privacy. We take steps to ensure that all staff, physicians and anyone performing services for us protect your privacy. They may only use your personal health information for the purposes to which you have consented.

Who can access a patient’s personal health information?

We are committed to protecting the privacy, confidentiality and security of all personal health information used and collected to carry out our mission.

The only people with access to your health information are the ones in your circle of care. Your circle of care includes the physicians, nurses, technicians, clerks or other staff members assigned to your care during your stay or visit as a patient.

Accessing your personal medical information

As a patient, you may access your personal health information and medical record by submitting a written or in-person request. You may also ask that information contained in your medial record be corrected.

  • To access your spouse’s personal medical information, they must sign a consent form.
  • If the patient is under 16 years of age, the parent/legal guardian must sign the authorization.


To access patient information in accordance with legislative requirements, we require a written authorization containing the following: 

  • Your name or the name of the patient
  • Patient's date of birth
  • Reason for the request
  • The type of information required and treatment dates if possible
  • The name and address of the person you wish the information sent to
  • The authorization must be signed, dated and witnessed


Mail written requests or deliver your request in person, Monday to Friday, between 10:00 a.m and 3:00 p.m. at:

Medical Records Department
Stevenson Memorial Hospital
200 Fletcher Crescent
Alliston, ON L9R 1W7

Fax: (705) 434-5120

Authorization for Release of Personal Health Information Form

There is typically an administrative fee for copies of records.  You will be given access to your record within 30 days.


Making a privacy complaint under PHIPA

As a patient, if you feel there was a breach in your privacy or the protection of your personal health information by Stevenson staff, you may file a complaint. A privacy breach happens when health professionals collect, use, disclose or access your personal health information for unauthorized purposes.

To file a privacy complaint under PHIPA, please call, mail or deliver a letter to:

Privacy Officer
Stevenson Memorial Hospital

200 Fletcher Crescent
Alliston, ON  L9R 1W7

Telephone: (705) 435-6281, ext. 1347


Information and Privacy Commissioner of Ontario
2 Bloor Street East, Suite 1400
Toronto, Ontario M4W 1A8

Telephone: 1-800-387-0073

More information is available online regarding the Personal Health Information Protection Act.